I agree the way you describe is even better. That said if the previous posters password isn't enough entropy for your use case some form of 2 factor auth should come into play as well.